$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa File: 8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa (raw, json) Hash identifier: wNncPkxxn+ZHphRgW+wjGbVi4h/VIlLNEza0qH7nTNs= Subject key identifier: 39:17:5A:FB:B0:1D:BE:15:C9:81:6D:DD:93:F7:72:D9:CC:48:A8:04 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ECBD1D6FFA527043D6DEA7980 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 130.137.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d6:ff:a5:27:04:3d:6d:ea:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=1a379f0b-d31b-43ee-93dc-75102587a39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:2e:91:26:19:f2:2b:ae:48:ca:87:4a:08: 20:cf:2d:aa:91:6c:ff:a6:48:8f:cf:d0:b1:46:80: 55:be:c9:c3:91:5a:18:a6:9e:4f:2e:eb:e2:2a:63: 16:e0:c9:71:5c:d0:05:50:a7:c6:29:f5:4e:6a:34: 97:ac:e4:15:ec:33:ac:1d:a6:89:44:20:d0:9c:ed: 14:c0:b8:81:fa:d2:a4:c8:5f:7a:de:fe:49:95:62: 5d:ea:28:61:0f:46:a7:93:c4:e4:f0:bb:d1:07:7d: 85:ab:d2:8a:be:30:aa:3d:e7:1b:a1:aa:95:be:51: 16:74:ba:6f:c9:27:98:2b:53:b1:df:67:73:f8:72: 0f:38:f3:bd:f8:bf:2a:a4:5d:93:a5:3d:c8:96:37: 94:9b:65:a5:b8:6b:40:8a:3f:d3:73:a8:f8:8e:98: 68:7a:7e:e0:a0:d2:d4:3f:4a:88:ed:21:18:e2:5f: 25:56:e0:78:a6:0c:9f:87:ae:f4:06:83:6e:ab:99: 8c:dc:59:b2:89:ed:f0:1c:c2:18:cb:9d:16:78:47: e7:0a:b1:bb:8a:07:b9:a3:6e:8d:8a:50:64:24:96: be:97:de:4f:35:bb:4a:50:f6:78:2f:08:18:72:2e: 4a:ea:fb:f0:e7:d2:7f:09:04:39:3e:fc:94:ed:a8: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:5A:FB:B0:1D:BE:15:C9:81:6D:DD:93:F7:72:D9:CC:48:A8:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8fb3f773-8aa3-3dd5-bcf7-39f4cbdfef2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2e:a2:b1:da:89:0f:c0:4b:c2:53:7a:41:7d:7e:91:36:22: d6:ed:9e:8d:8a:01:2c:b5:39:81:12:9d:38:8e:81:06:f0:c8: 51:1f:76:14:1a:78:58:1f:63:36:d6:92:64:35:38:b5:0b:53: 30:a5:44:d9:cb:10:9e:f5:5a:fb:c6:a7:ca:ae:07:4f:8d:de: 7e:b1:9a:90:99:60:37:ce:e5:a0:86:e5:f6:c9:30:cb:00:2b: 54:8e:9c:33:18:39:7c:d9:31:39:4c:9c:57:e7:09:77:06:59: 83:ae:f1:b1:99:21:41:e9:7c:e2:11:cb:0e:26:7e:ce:2b:06: 0c:94:be:88:91:83:12:99:8e:b5:1f:4f:cf:b4:93:ce:7f:76: b4:d2:0c:7c:7c:12:e3:72:8c:c0:76:16:8b:76:89:a7:27:5c: 56:c1:2e:71:b2:74:5e:99:0d:77:32:64:c9:0d:52:a2:f0:fd: 12:9c:bb:a8:e9:1a:7c:ce:f2:67:27:99:cf:59:cb:14:25:a4: 69:94:e9:34:69:b9:e7:22:5b:e8:8a:d8:70:17:94:17:90:99: a3:6b:9f:b6:63:75:c7:d7:83:1c:70:33:33:d7:a0:6a:14:76: d8:b6:4d:bc:7e:10:fc:6a:75:e6:83:cf:0b:b2:50:d2:26:c9: 7c:c2:0e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0db/pScEPW3qeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MWEzNzlmMGItZDMxYi00M2VlLTkzZGMtNzUxMDI1ODdhMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc0ukSYZ8iuuSMqHSgggzy2qkWz/pkiPz9Cx RoBVvsnDkVoYpp5PLuviKmMW4MlxXNAFUKfGKfVOajSXrOQV7DOsHaaJRCDQnO0U wLiB+tKkyF963v5JlWJd6ihhD0ank8Tk8LvRB32Fq9KKvjCqPecboaqVvlEWdLpv ySeYK1Ox32dz+HIPOPO9+L8qpF2TpT3IljeUm2WluGtAij/Tc6j4jphoen7goNLU P0qI7SEY4l8lVuB4pgyfh670BoNuq5mM3Fmyie3wHMIYy50WeEfnCrG7ige5o26N ilBkJJa+l95PNbtKUPZ4LwgYci5K6vvw59J/CQQ5PvyU7ag83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkXWvuwHb4VyYFt3ZP3ctnMSKgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGZiM2Y3NzMtOGFhMy0z ZGQ1LWJjZjctMzlmNGNiZGZlZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFouorHaiQ/AS8JTekF9fpE2Itbtno2KASy1OYESnTiOgQbwyFEfdhQa eFgfYzbWkmQ1OLULUzClRNnLEJ71WvvGp8quB0+N3n6xmpCZYDfO5aCG5fbJMMsA K1SOnDMYOXzZMTlMnFfnCXcGWYOu8bGZIUHpfOIRyw4mfs4rBgyUvoiRgxKZjrUf T8+0k85/drTSDHx8EuNyjMB2Fot2iacnXFbBLnGydF6ZDXcyZMkNUqLw/RKcu6jp GnzO8mcnmc9ZyxQlpGmU6TRpueciW+iK2HAXlBeQmaNrn7ZjdcfXgxxwMzPXoGoU dti2Tbx+EPxqdeaDzwuyUNImyXzCDgs= -----END CERTIFICATE-----Generated at Mon Sep 21 09:26:19 2026 by rpki-client